From 686318dfac2b0bac4d2d853afc51a45bc4c173af Mon Sep 17 00:00:00 2001
From: Nasim Sadat <sadat@digital-bridge.net>
Date: Fri, 30 Oct 2026 10:57:18 +0100
Subject: [PATCH] Remove the Keycloak client import

The file was already gone from the working tree; why is not recorded. README
and AGENTS.md still point to it. Revert this commit to bring it back.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
---
 keycloak/petrolyst-partial-import.json | 57 --------------------------
 1 file changed, 57 deletions(-)
 delete mode 100644 keycloak/petrolyst-partial-import.json

diff --git a/keycloak/petrolyst-partial-import.json b/keycloak/petrolyst-partial-import.json
deleted file mode 100644
index 8c5c7d1..0000000
--- a/keycloak/petrolyst-partial-import.json
+++ /dev/null
@@ -1,57 +0,0 @@
-{
-  "clients": [
-    {
-      "clientId": "petrolyst",
-      "name": "Petrolyst",
-      "description": "Petrolyst apps on the petrolyst server: Superset at atoma.petrolyst.com and the Traefik dashboard at traefik.petrolyst.com (oauth2-proxy). Managed from petrolyst-infra/keycloak/.",
-      "enabled": true,
-      "protocol": "openid-connect",
-      "publicClient": false,
-      "clientAuthenticatorType": "client-secret",
-      "standardFlowEnabled": true,
-      "implicitFlowEnabled": false,
-      "directAccessGrantsEnabled": false,
-      "serviceAccountsEnabled": false,
-      "frontchannelLogout": true,
-      "baseUrl": "https://atoma.petrolyst.com/",
-      "redirectUris": [
-        "https://atoma.petrolyst.com/oauth-authorized/keycloak",
-        "https://traefik.petrolyst.com/oauth2/callback"
-      ],
-      "webOrigins": ["+"],
-      "attributes": {
-        "pkce.code.challenge.method": "S256",
-        "post.logout.redirect.uris": "https://atoma.petrolyst.com/*##https://traefik.petrolyst.com/*"
-      },
-      "protocolMappers": [
-        {
-          "name": "petrolyst client roles",
-          "protocol": "openid-connect",
-          "protocolMapper": "oidc-usermodel-client-role-mapper",
-          "consentRequired": false,
-          "config": {
-            "usermodel.clientRoleMapping.clientId": "petrolyst",
-            "multivalued": "true",
-            "claim.name": "petrolyst_roles",
-            "jsonType.label": "String",
-            "id.token.claim": "true",
-            "access.token.claim": "true",
-            "userinfo.token.claim": "true",
-            "introspection.token.claim": "true"
-          }
-        }
-      ]
-    }
-  ],
-  "roles": {
-    "client": {
-      "petrolyst": [
-        { "name": "superset-admin", "description": "Superset Admin at atoma.petrolyst.com" },
-        { "name": "superset-editor", "description": "Superset Alpha: build charts and dashboards" },
-        { "name": "superset-viewer", "description": "Superset Gamma: view dashboards shared with the role" },
-        { "name": "atoma-reader", "description": "ATOMA's users: the Petrolyst app (no role in Superset)" },
-        { "name": "traefik-admin", "description": "Traefik dashboard at traefik.petrolyst.com" }
-      ]
-    }
-  }
-}